最佳实战：oss服务端签名后直传（学习总结，不喜勿喷）

前言：

之前做过服务端通过oos原生以及alicloud-oss上传文件，效率不是那么的客观，于是采用在前端上传文件的方法，但是由于 AccessKeyId以及AccessKeySecret直接放在代码总很容易被获取到，安全存在隐患，最终采取服务端获取签名前端直传的方法，都是学习过程总的方法，可能没人懂，因为本人的写博客水平确实很菜，加上技术也就那么回事- - 

---

前端：

先附上前端代码：

<template>
  <div>
    <el-upload
      action="http://objectjjs.oss-cn-beijing.aliyuncs.com"
      :data="dataObj"
      list-type="picture"
      :multiple="false"
      :show-file-list="showFileList"
      :file-list="fileList"
      :before-upload="beforeUpload"
      :on-remove="handleRemove"
      :on-success="handleUploadSuccess"
      :on-preview="handlePreview"
    >
      <el-button size="small" type="primary">点击上传</el-button>
      <div slot="tip" class="el-upload__tip">只能上传jpg/png文件，且不超过5MB</div>
    </el-upload>
    <el-dialog :visible.sync="dialogVisible">
      <img width="100%" :src="fileList[0].url" alt />
    </el-dialog>
  </div>
</template>
<script>
// import { policy } from "./policy";
import http from '@/utils/httpRequest.js'
import { getUUID } from "@/utils";

export default {
  name: "singleUpload",
  props: {
    value: String
  },
  computed: {
    imageUrl() {
      return this.value;
    },
    imageName() {
      if (this.value != null && this.value !== "") {
        return this.value.substr(this.value.lastIndexOf("/") + 1);
      } else {
        return null;
      }
    },
    fileList() {
      return [
        {
          name: this.imageName,
          url: this.imageUrl
        }
      ];
    },
    showFileList: {
      get: function() {
        return (
          this.value !== null && this.value !== "" && this.value !== undefined
        );
      },
      set: function(newValue) {}
    }
  },
  data() {
    return {
      dataObj: {
        policy: "",
        signature: "",
        key: "",
        ossaccessKeyId: "",
        dir: "",
        host: ""
        // callback:'',
      },
      dialogVisible: false
    };
  },
  methods: {
    policy() {

        return  new Promise((resolve,reject)=>{
              http({
                  url: http.adornUrl("/thirdparty/oss/oss/policy"),
                  method: "get",
                  params: http.adornParams({})
              }).then(({ data }) => {
                  resolve(data);
              })
          });
    },


    emitInput(val) {
      this.$emit("input", val);
    },
    handleRemove(file, fileList) {
      this.emitInput("");
    },
    handlePreview(file) {
      this.dialogVisible = true;
    },
    beforeUpload(file) {
      let _self = this;
      return new Promise((resolve, reject) => {
        this.policy()
          .then(response => {
            _self.dataObj.policy = response.data.policy;
            _self.dataObj.signature = response.data.signature;
            _self.dataObj.ossaccessKeyId = response.data.accessid;
            _self.dataObj.key = response.data.dir + getUUID() + "_${filename}";
            _self.dataObj.dir = response.data.dir;
            _self.dataObj.host = response.data.host;
            // console.log("响应的数据", _self.dataObj);
            resolve(true);
          })
          .catch(err => {
            reject(false);
          });
      });
    },
    
    handleUploadSuccess(res, file) {
      this.showFileList = true;
      this.fileList.pop();
      this.fileList.push({
        name: file.name,
        url:
          this.dataObj.host +
          "/" +
          this.dataObj.key.replace("${filename}", file.name)
      });
      this.emitInput(this.fileList[0].url);
    }
  }
};
</script>
<style>
</style>

前端主要采用vue的el_upload组件

 <el-upload
      action="http://objectjjs.oss-cn-beijing.aliyuncs.com"
      :data="dataObj"
      list-type="picture"
      :multiple="false"
      :show-file-list="showFileList"
      :file-list="fileList"
      :before-upload="beforeUpload"
      :on-remove="handleRemove"
      :on-success="handleUploadSuccess"
      :on-preview="handlePreview"
    >

在这段代码中，action填写的是Bucket 域名，可以进入阿里云的oss概述中找到

有一个步骤很关键，必须要打开bucket跨域支持，也在概述中往最下面拉即可找到

 

在data中填充必要的参数 ：

 policy   signature  key  ossaccessKeyId  dir    host 

在发送上传文件请求之前会调用‘beforeUpload’方法对上面这些参数赋值：

调用‘beforeUpload'时，会调用policy方法，想服务端发起请求获取参数

 policy() {

        return  new Promise((resolve,reject)=>{
              http({
                  url: http.adornUrl("/thirdparty/oss/oss/policy"),
                  method: "get",
                  params: http.adornParams({})
              }).then(({ data }) => {
                  resolve(data);
              })
          });
    }

  beforeUpload(file) {
      let _self = this;
      return new Promise((resolve, reject) => {
        this.policy()
          .then(response => {
            _self.dataObj.policy = response.data.policy;
            _self.dataObj.signature = response.data.signature;
            _self.dataObj.ossaccessKeyId = response.data.accessid;
            _self.dataObj.key = response.data.dir + getUUID() + "_${filename}";
            _self.dataObj.dir = response.data.dir;
            _self.dataObj.host = response.data.host;
            // console.log("响应的数据", _self.dataObj);
            resolve(true);
          })
          .catch(err => {
            reject(false);
          });
      });
    }

当获取参数成功后就会封装进入data中，发送到所填域名。

后端

建议先看之前写的ali-oss上传文件经行相关配置完毕，

bucket，endpoint，access-key 这三个字段都写在配置文件中，以防被泄露，并且可以动态的修改

import com.aliyun.oss.OSSClient;
import com.aliyun.oss.common.utils.BinaryUtil;
import com.aliyun.oss.model.MatchMode;
import com.aliyun.oss.model.PolicyConditions;
import com.atguigu.common.utils.R;
import org.springframework.beans.factory.annotation.Value;
import org.springframework.web.bind.annotation.RequestMapping;
import org.springframework.web.bind.annotation.RestController;
import javax.annotation.Resource;
import java.text.SimpleDateFormat;
import java.util.Date;
import java.util.LinkedHashMap;
import java.util.Map;

@RestController
@RequestMapping("thirdparty/oss")
public class OssController {
    @Value("${spring.cloud.alicloud.oss.bucket}")
    String bucket;

    @Value("${spring.cloud.alicloud.oss.endpoint}")
    String endpoint;

    @Value("${spring.cloud.alicloud.access-key}")
    String accesskey;
    /**
     * 后端生成签名
     *
     */
    @Resource
    OSSClient ossClient;
    @RequestMapping("/oss/policy")
   public R policy(){
//       https://objectjjs.oss-cn-beijing.aliyuncs.com/aa.txt

       String host = "https://" + bucket + "." + endpoint; // host的格式为 bucketname.endpoint
       // callbackUrl为上传回调服务器的URL，请将下面的IP和Port配置为您自己的真实信息。
//       String callbackUrl = "http://88.88.88.88:8888";

       String prefix =new SimpleDateFormat("yyyy-MM-dd").format(new Date());
       String dir = prefix+"/"; // 用户上传文件时指定的前缀。(意思以一天为单位创建一个目录
       Map<String, String> respMap = new LinkedHashMap<String, String>();
       try {
           long expireTime = 30;
           long expireEndTime = System.currentTimeMillis() + expireTime * 1000;
           Date expiration = new Date(expireEndTime);
           // PostObject请求最大可支持的文件大小为5 GB，即CONTENT_LENGTH_RANGE为5*1024*1024*1024。
           PolicyConditions policyConds = new PolicyConditions();
           policyConds.addConditionItem(PolicyConditions.COND_CONTENT_LENGTH_RANGE, 0, 1048576000);
           policyConds.addConditionItem(MatchMode.StartWith, PolicyConditions.COND_KEY, dir);

           String postPolicy = ossClient.generatePostPolicy(expiration, policyConds);
           byte[] binaryData = postPolicy.getBytes("utf-8");
           String encodedPolicy = BinaryUtil.toBase64String(binaryData);
           String postSignature = ossClient.calculatePostSignature(postPolicy);


           respMap.put("accessid", accesskey);
           respMap.put("policy", encodedPolicy);
           respMap.put("signature", postSignature);
           respMap.put("dir", dir);
           respMap.put("host", host);
           respMap.put("expire", String.valueOf(expireEndTime / 1000));
           // respMap.put("expire", formatISO8601Date(expiration));




       } catch (Exception e) {
           // Assert.fail(e.getMessage());
           System.out.println(e.getMessage());
       } finally {
           ossClient.shutdown();
       }
       return  R.ok().put("data",respMap);

   }

}

代码来源：前端来自elementui，后端可以在阿里云oss开发者手册中找到